Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: cwe-200 Clear
ID Title
CVE-2026-34087 Information Disclosure in mediawiki (CVE-2026-34087)
vulnerability in mediawiki (CVE-2026-34087). Confidential information can be exposed externally.
CVE-2026-34088 Information Disclosure in mediawiki (CVE-2026-34088)
vulnerability in mediawiki (CVE-2026-34088). Confidential information can be exposed externally.
CVE-2026-34090 Information Disclosure in mediawiki (CVE-2026-34090)
vulnerability in mediawiki (CVE-2026-34090). Confidential information can be exposed externally.
CVE-2026-34091 Information Disclosure in mediawiki (CVE-2026-34091)
vulnerability in mediawiki (CVE-2026-34091). Confidential information can be exposed externally.
CVE-2026-34092 Information Disclosure in mediawiki (CVE-2026-34092)
vulnerability in mediawiki (CVE-2026-34092). Confidential information can be exposed externally.
CVE-2026-44431 Information Disclosure in urllib3 (CVE-2026-44431)
vulnerability in urllib3 (CVE-2026-44431). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.7.0` or later.
CVE-2026-42333 Information Disclosure in io.quarkiverse.openapi.generator:quarkus-openapi-generator (CVE-2026-42333)
vulnerability in io.quarkiverse.openapi.generator:quarkus-openapi-generator (CVE-2026-42333). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.17.0` or later.
CVE-2026-8198 Information Disclosure in wordpress (CVE-2026-8198)
vulnerability in wordpress (CVE-2026-8198). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`.
CVE-2026-42456 Information Disclosure in mintplexlabs (CVE-2026-42456)
vulnerability in mintplexlabs (CVE-2026-42456). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/workspace/`.
CVE-2026-41520 Information Disclosure in cilium (CVE-2026-41520)
vulnerability in cilium (CVE-2026-41520). Confidential information can be exposed externally. Mitigation: upgrade to `1.17.15, 1.18.9, 1.19.3` or later.
CVE-2026-42213 Path Traversal in CVE-2026-42213 (CVE-2026-42213)
path traversal in CVE-2026-42213 (CVE-2026-42213). Risk of unauthorized operations or information disclosure.
CVE-2026-42195 Information Disclosure in CVE-2026-42195 (CVE-2026-42195)
vulnerability in CVE-2026-42195 (CVE-2026-42195). Risk of unauthorized operations or information disclosure.
CVE-2026-25199 Information Disclosure in apache (CVE-2026-25199)
vulnerability in apache (CVE-2026-25199). Confidential information can be exposed externally.
CVE-2026-43942 Information Disclosure in electerm (CVE-2026-43942)
vulnerability in electerm (CVE-2026-43942). Confidential information can be exposed externally. Exploitable via ``process.env``.
CVE-2026-42880 Information Disclosure in argo-cd (CVE-2026-42880)
vulnerability in argo-cd (CVE-2026-42880). Confidential information can be exposed externally.
CVE-2026-42826 Information Disclosure in microsoft (CVE-2026-42826)
vulnerability in microsoft (CVE-2026-42826). Successful exploitation can lead to full system takeover.
CVE-2026-42047 Information Disclosure in inngest (CVE-2026-42047)
vulnerability in inngest (CVE-2026-42047). Confidential information can be exposed externally. Exploitable via ``GET``. Mitigation: upgrade to `3.54.0` or later.
CVE-2025-31976 Information Disclosure in hcltech (CVE-2025-31976)
vulnerability in hcltech (CVE-2025-31976). Risk of unauthorized operations or information disclosure.
CVE-2025-53066 Information Disclosure in java (CVE-2025-53066)
vulnerability in java (CVE-2025-53066). Confidential information can be exposed externally. Mitigation: upgrade to `1.8.0, 8.0.471, 11.0.29, 17.0.17, 21.0.9, 25.0.1` or later.
CVE-2022-21296 Information Disclosure in java (CVE-2022-21296)
vulnerability in java (CVE-2022-21296). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0, 1.8.0, 7.0.331, 8.0.321, 11.0.14, 17.0.2` or later.
CVE-2026-36355 Information Disclosure in CVE-2026-36355 (CVE-2026-36355)
vulnerability in CVE-2026-36355 (CVE-2026-36355). Confidential information can be exposed externally.
CVE-2026-42151 Information Disclosure in github.com/prometheus/prometheus (CVE-2026-42151)
vulnerability in github.com/prometheus/prometheus (CVE-2026-42151). Confidential information can be exposed externally. Exploitable via ``client_secret``. Mitigation: upgrade to `0.311.3` or later.
CVE-2026-7382 Information Disclosure in CVE-2026-7382 (CVE-2026-7382)
vulnerability in CVE-2026-7382 (CVE-2026-7382). Confidential information can be exposed externally.
CVE-2026-30246 Vulnerability in github.com/gofiber/fiber/v3 (CVE-2026-30246)
vulnerability in github.com/gofiber/fiber/v3 (CVE-2026-30246). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.0` or later.
CVE-2026-41182 Information Disclosure in CVE-2026-41182 (CVE-2026-41182)
vulnerability in CVE-2026-41182 (CVE-2026-41182). Risk of unauthorized operations or information disclosure.
CVE-2026-6392 Tanium addressed an information disclosure vulnerability in Threat Response.
Tanium addressed an information disclosure vulnerability in Threat Response.
CVE-2026-22016 Information Disclosure in java (CVE-2026-22016)
vulnerability in java (CVE-2026-22016). Confidential information can be exposed externally. Mitigation: upgrade to `1.8.0, 8.0.491, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1` or later.
CVE-2026-40895 Information Disclosure in follow-redirects-project (CVE-2026-40895)
vulnerability in follow-redirects-project (CVE-2026-40895). Confidential information can be exposed externally. Exploitable via `Cookie header`. Mitigation: upgrade to `1.16.0` or later.
CVE-2026-21999 Information Disclosure in c (CVE-2026-21999)
vulnerability in c (CVE-2026-21999). Confidential information can be exposed externally.
CVE-2026-31370 Information Disclosure in CVE-2026-31370 (CVE-2026-31370)
vulnerability in CVE-2026-31370 (CVE-2026-31370). Risk of unauthorized operations or information disclosure.
CVE-2026-22051 Information Disclosure in netapp (CVE-2026-22051)
vulnerability in netapp (CVE-2026-22051). Risk of unauthorized operations or information disclosure.
CVE-2026-20133 KEV [KEV] Information Disclosure in Cisco catalyst-sd-wan-manager (CVE-2026-20133)
vulnerability in Cisco catalyst-sd-wan-manager (CVE-2026-20133). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2026-40293 Information Disclosure in github.com/openfga/openfga (CVE-2026-40293)
vulnerability in github.com/openfga/openfga (CVE-2026-40293). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.14.0` or later.
CVE-2026-6492 Information Disclosure in CVE-2026-6492 (CVE-2026-6492)
vulnerability in CVE-2026-6492 (CVE-2026-6492). Risk of unauthorized operations or information disclosure.
CVE-2025-15625 SQL Injection in sparxsystems (CVE-2025-15625)
SQL injection in sparxsystems (CVE-2025-15625). Successful exploitation can lead to full system takeover.
CVE-2026-25125 Code Injection in october/rain (CVE-2026-25125)
code injection in october/rain (CVE-2026-25125). Confidential information can be exposed externally. Exploitable via ``cms.safe_mode``. Mitigation: upgrade to `3.7.14` or later.
CVE-2026-33829 Information Disclosure in microsoft (CVE-2026-33829)
vulnerability in microsoft (CVE-2026-33829). Risk of unauthorized operations or information disclosure.
CVE-2026-4660 Information Disclosure in github.com/hashicorp/go-getter (CVE-2026-4660)
vulnerability in github.com/hashicorp/go-getter (CVE-2026-4660). Confidential information can be exposed externally. Mitigation: upgrade to `1.8.6` or later.
CVE-2026-39889 Information Disclosure in praison (CVE-2026-39889)
vulnerability in praison (CVE-2026-39889). Confidential information can be exposed externally. Mitigation: upgrade to `4.5.115` or later.
CVE-2026-39412 Information Disclosure in liquidjs (CVE-2026-39412)
vulnerability in liquidjs (CVE-2026-39412). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.25.4` or later.
CVE-2026-3594 Information Disclosure in wordpress (CVE-2026-3594)
vulnerability in wordpress (CVE-2026-3594). Risk of unauthorized operations or information disclosure.
CVE-2026-39363 Information Disclosure in vitejs (CVE-2026-39363)
vulnerability in vitejs (CVE-2026-39363). Confidential information can be exposed externally. Mitigation: upgrade to `6.4.2` or later.
CVE-2026-35452 Information Disclosure in wwbn (CVE-2026-35452)
vulnerability in wwbn (CVE-2026-35452). Risk of unauthorized operations or information disclosure.
CVE-2026-35449 Information Disclosure in wwbn (CVE-2026-35449)
vulnerability in wwbn (CVE-2026-35449). Risk of unauthorized operations or information disclosure.
CVE-2026-35413 Information Disclosure in monospace (CVE-2026-35413)
vulnerability in monospace (CVE-2026-35413). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.16.1` or later.
CVE-2026-35442 Information Disclosure in monospace (CVE-2026-35442)
vulnerability in monospace (CVE-2026-35442). Confidential information can be exposed externally. Mitigation: upgrade to `11.17.0` or later.
CVE-2026-30613 Information Disclosure in CVE-2026-30613 (CVE-2026-30613)
vulnerability in CVE-2026-30613 (CVE-2026-30613). Confidential information can be exposed externally.
CVE-2026-5601 Information Disclosure in CVE-2026-5601 (CVE-2026-5601)
vulnerability in CVE-2026-5601 (CVE-2026-5601). Risk of unauthorized operations or information disclosure.
CVE-2026-5585 Information Disclosure in tencent (CVE-2026-5585)
vulnerability in tencent (CVE-2026-5585). Risk of unauthorized operations or information disclosure.
CVE-2026-5571 Information Disclosure in technostrobe (CVE-2026-5571)
vulnerability in technostrobe (CVE-2026-5571). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →